Read the docs

Mobatime

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Mobatime records in CISA KEV

No Mobatime vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Amxgt 100 3 records HIGH Mobatime Web Application 2 records HIGH

Records

3 records in Amxgt 100 · all components

TI-2023-02871 CVE-2023-3065 · GHSA-3qqf-mphv-gv8r

Mobatime mobile application - Authentication bypass

Priority HIGH 80

Improper Authentication vulnerability in Mobatime mobile application AMXGT100 allows Authentication Bypass.This issue affects Mobatime mobile application AMXGT100 through 1.3.20.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00783 Published 2023-06-05 No fix listed CWE-287
TI-2023-02872 CVE-2023-3066 · GHSA-8jvm-2mxj-236c

Mobatime mobile application - Broken authorisation

Priority HIGH 70

Incorrect Authorization vulnerability in Mobatime mobile application AMXGT100 allows a low-privileged user to impersonate anyone else, including administratorsThis issue affects Mobatime mobile application AMXGT100: thro…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00587 Published 2023-06-05 No fix listed CWE-863
TI-2023-02870 CVE-2023-3064 · GHSA-5vfx-5jgv-gvwr

Mobatime mobile application - Sensitive information disclosure

Priority HIGH 68

Anonymous user may get the list of existing users managed by the application, that could ease further attacks (see CVE-2023-3065 and 3066)This issue affects Mobatime mobile application AMXGT100 through 1.3.20.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00598 Published 2023-06-05 No fix listed CWE-200
Open these records in search →